mssql-server-fts
MEDIUM
maintainer too
2 votes
scanned 2026-09-27 19:19:18.915602
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:22
source=("https://packages.microsoft.com/ubuntu/24.04/mssql-server-2025/pool/main/m/${pkgname}/${_debfile}")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: too <turecki@gmail.com>
2
# Contributor: Kai Korla <kai@korla.cloud>
3
# Contributor: MrHacker <kmunoz@condorbs.net>
4
5
pkgname=mssql-server-fts
6
pkgver=17.0.5005.3
7
_remRevision=1
8
_prodver=${pkgver}-${_remRevision}
9
pkgrel=1
10
pkgdesc="Microsoft SQL Server 2025 Full Text Search"
11
arch=('x86_64')
12
# Prebuilt Microsoft payloads: nothing to strip, no debug package to split.
13
options=('!strip' '!debug')
14
url="https://learn.microsoft.com/en-us/sql/linux/sql-server-linux-overview?view=sql-server-ver17"
15
license=('LicenseRef-Microsoft-SQL-Server-EULA')
16
17
# Taken from the same Ubuntu 24.04 pool as mssql-server so the engine and the
18
# full-text module always come from one upstream build. Unlike the engine this
19
# package contains no ELF binaries at all - only sqlservr.fts.sfp and
20
# semanticsdb.bak - so it has no link-time dependency on the host distribution.
21
_debfile="${pkgname}_${_prodver}_amd64.deb"
22
source=("https://packages.microsoft.com/ubuntu/24.04/mssql-server-2025/pool/main/m/${pkgname}/${_debfile}")
23
noextract=("${_debfile}")
24
sha256sums=('5d46c644c35013f2a28f23caa43400a89d06b0ea310d42a9e909da2ed18dfeb8')
25
26
# The .sfp is loaded into the engine process, so it has to match the engine
27
# build exactly. Declared at the top level, not inside package(), so that
28
# .SRCINFO and the AUR dependency graph actually see it.
29
depends=("mssql-server=${pkgver}")
30
31
install=$pkgname.install
32
33
prepare() {
34
# makepkg unpacks the ar archive but will not recurse into the payload
35
# member, so do that by hand. Do not hardcode the compression suffix.
36
local _payload
37
_payload=$(bsdtar -tf "$srcdir/$_debfile" | grep -m1 '^data\.tar\.')
38
[ -n "$_payload" ] || { echo "no data.tar.* member in $_debfile" >&2; return 1; }
39
bsdtar -xOf "$srcdir/$_debfile" "$_payload" | bsdtar -xf - -C "$srcdir"
40
}
41
42
package() {
43
cp -a "$srcdir/opt" "$pkgdir/opt"
44
45
# Upstream ships only a copyright stub in this package. The licence that
46
# actually governs it is the engine EULA, which arrives with the exact
47
# mssql-server build this package depends on, so link to it rather than
48
# duplicating a megabyte of text.
49
install -Dm644 "$srcdir/usr/share/doc/$pkgname/copyright" \
50
"$pkgdir/usr/share/licenses/$pkgname/copyright"
51
ln -s ../mssql-server/LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
52
}
53
Changes since previous scan
--- PKGBUILD @ 2026-06-20 16:03+++ PKGBUILD @ 2026-09-27 19:19@@ -1,22 +1,53 @@-# Maintainer: Kai Korla <kai@korla.cloud>+# Maintainer: too <turecki@gmail.com>+# Contributor: Kai Korla <kai@korla.cloud> # Contributor: MrHacker <kmunoz@condorbs.net> pkgname=mssql-server-fts-pkgver=16.0.4225.2-_remRevision=2+pkgver=17.0.5005.3+_remRevision=1 _prodver=${pkgver}-${_remRevision} pkgrel=1-pkgdesc="Microsoft SQL Server Full Text Search"+pkgdesc="Microsoft SQL Server 2025 Full Text Search" arch=('x86_64')-url="https://learn.microsoft.com/en-us/sql/linux/sql-server-linux-overview?view=sql-server-ver16"-license=('unknown')-source=("https://pmc-prod-afd-endpoint-evdhh8f8byhsezfp.b01.azurefd.net/rhel/8/mssql-server-2022/Packages/m/${pkgname}-${_prodver}.${CARCH}.rpm")-sha256sums=('727166143629077b38c14d96e4731d2f7d76de734de1a7d156c70e2772b88541')+# Prebuilt Microsoft payloads: nothing to strip, no debug package to split.+options=('!strip' '!debug')+url="https://learn.microsoft.com/en-us/sql/linux/sql-server-linux-overview?view=sql-server-ver17"+license=('LicenseRef-Microsoft-SQL-Server-EULA')++# Taken from the same Ubuntu 24.04 pool as mssql-server so the engine and the+# full-text module always come from one upstream build. Unlike the engine this+# package contains no ELF binaries at all - only sqlservr.fts.sfp and+# semanticsdb.bak - so it has no link-time dependency on the host distribution.+_debfile="${pkgname}_${_prodver}_amd64.deb"+source=("https://packages.microsoft.com/ubuntu/24.04/mssql-server-2025/pool/main/m/${pkgname}/${_debfile}")+noextract=("${_debfile}")+sha256sums=('5d46c644c35013f2a28f23caa43400a89d06b0ea310d42a9e909da2ed18dfeb8')++# The .sfp is loaded into the engine process, so it has to match the engine+# build exactly. Declared at the top level, not inside package(), so that+# .SRCINFO and the AUR dependency graph actually see it.+depends=("mssql-server=${pkgver}")+ install=$pkgname.install-depends=('mssql-server=16.0.4225.2')++prepare() {+ # makepkg unpacks the ar archive but will not recurse into the payload+ # member, so do that by hand. Do not hardcode the compression suffix.+ local _payload+ _payload=$(bsdtar -tf "$srcdir/$_debfile" | grep -m1 '^data\.tar\.')+ [ -n "$_payload" ] || { echo "no data.tar.* member in $_debfile" >&2; return 1; }+ bsdtar -xOf "$srcdir/$_debfile" "$_payload" | bsdtar -xf - -C "$srcdir"+} package() {- cd $pkgdir- mv $srcdir/opt .+ cp -a "$srcdir/opt" "$pkgdir/opt"++ # Upstream ships only a copyright stub in this package. The licence that+ # actually governs it is the engine EULA, which arrives with the exact+ # mssql-server build this package depends on, so link to it rather than+ # duplicating a megabyte of text.+ install -Dm644 "$srcdir/usr/share/doc/$pkgname/copyright" \+ "$pkgdir/usr/share/licenses/$pkgname/copyright"+ ln -s ../mssql-server/LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE" } Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-27 19:19:18 | Medium | 1 |
| 2026-06-20 16:03:41 | Clean | 2 |
| 2026-06-20 00:50:07 | Medium | 2 |
| 2026-06-20 00:18:46 | Medium | 2 |
| 2026-06-19 23:51:18 | Medium | 2 |
| 2026-06-19 19:07:35 | Medium | 2 |
| 2026-06-18 16:11:54 | Medium | 1 |